encfs
encfs copied to clipboard
Setuid and setcap not working.
I'm expecting that this is expected and know but I seem to be unable to have applications located on the encfs mounted partition honor setuid or setcap (in particular cap_net_raw). I'm assuming this is because the interaction between encfs and fuse but maybe I'm doing something wrong.
I can provide more information if needed.
This is common to FUSE filesystems. Otherwise, a user could mount a user filesystem that provided a root binary marked as setuid.
See https://github.com/torvalds/linux/blob/master/Documentation/filesystems/fuse.rst#how-are-requirements-fulfilled
It doesn't seem possible to bypass this.